We’re here to help

Virus alert, cannot delete source file

Comments

10 comments

  • Avatar
    Jen Sno

    same

    0
    Comment actions Permalink
  • Avatar
    pascha45

    Hello Alan,

    Hello Jen,

    Your contribution has been forwarded to the support team for further investigation. From there you will receive further information.

    If anything is unclear, please let us know, we will be happy to help.

    Many greetings and a nice weekend

    0
    Comment actions Permalink
  • Avatar
    Tom Suzuki-Rowe

    me too please!

    0
    Comment actions Permalink
  • Avatar
    Kai H

    Ich habe das selbe Problem mit dem selben Virus wie Alan.

    Was kann ich tun?

    Vielen Dank

    0
    Comment actions Permalink
  • Avatar
    pascha45

    Hallo Kai,

    genau zu diesem Problem hattest Du bereits beim Support-Team ein Ticket erstellt.  Von dort waren bereits mehrere Antworten und Untersuchungen eingeleitet und besprochen worden.

    Wir sind ein öffentlich zugängliches Forum, personenbezogene Daten dürfen und können hier nicht bearbeitet werden. Zudem stehen dem Support-Team weitere Untersuchungsmöglichkeiten zur Verfügung, auf die wir hier keinen Zugriff haben.

    Kunden der Premium Produkte mit gültiger Lizenz können das Support-Team direkt kontaktieren:

    Vielleicht kannst Du Dich auf das bereits bearbeitete Ticket berufen oder sonst bitte erneut Dein Problem beschreiben,

    Sollte noch etwas unklar sein, bitte lass es uns wissen, wir helfen gern.

    Viele Grüße

    0
    Comment actions Permalink
  • Avatar
    Lionel

    Hello,

    As Alan, on my Mac OS 10.13.6 with Avira version 4.2.0.11, I have the alert for file "/private/var/db/uuidtext/69/578DD5D912335886F6685324E90385" and in Quarantine, the source file could not be deleted.

    Can you help me to resolve that please ?

    Thanks for your attention.

    0
    Comment actions Permalink
  • Avatar
    pascha45

    Hello Lionel,

    Please contact Mac support to check how to access the location of the file "/private/var/db/uuuidtext/69" and whether files such as "578DD5D912335886F6685324E90385" can be deleted manually without damaging the system.

    This was asked in the above-mentioned contribution.

    Have you already tried to allow the file to be checked for further analysis
    https://www.avira.com/en/analysis/submit 

    If anything is still unclear, please let us know with exact details of the investigations you have initiated. We will then try to assist you.

    Kind regards

    0
    Comment actions Permalink
  • Avatar
    Lionel

    Thank you pascha45 for your attention.

    I found the file concerned and deleted it, then I have launched a new scan that says it's ok, but each time I restart my MacBook Pro, the file is restored and the alert come back... Maybe it's a false positive ? I checked on google and found that the pattern HTML/ExpKit.Gen2 might be a virus for Windows, but no information about MacOS.

    As you advice to me, I allow the file to be checked and wait for now.

    In any case, I show you the journal entry :

    Nov 12 11:12:21 pc7 avguard-ondmd-plugin[4612] <Info>: Virus alert for file "/private/var/db/uuidtext/69/578DD5D912335886F6685324E90385": HTML/ExpKit.Gen2 ; virus ; Contains detection pattern of the HTML script virus HTML/ExpKit.Gen2
    Nov 12 11:12:21 pc7 avguard-ondmd-plugin[4612] <Warning>: Quarantine error for /private/var/db/uuidtext/69/578DD5D912335886F6685324E90385: Unable to quarantine file. Reason: the source file could not be deleted

     

    Thanks for your help !

    0
    Comment actions Permalink
  • Avatar
    pascha45

    Hello Lionel,

    Please excuse the late reply.

    Thank you very much for your feedback, we are always happy to receive it.
    If there is still something wrong with your installation, please do not hesitate to contact us.

    To be on the safe side, we would forward your questionable data to the support team and have it checked by them and possibly by the technical department.

    It may not be necessary any more, but knowing this should reassure you that we will be happy to help with any further questions.

    If anything is unclear, please let us know.

    Best wishes and a nice weekend

    0
    Comment actions Permalink
  • Avatar
    Lionel

    Ok, thank you !

    I received a feedback from the analysis, it appears it's a virus for Windows, but no precision about MacOS.

    So if the support team find a solution about it, I will take it !

    Have a nice weekend too

     

    0
    Comment actions Permalink

Please sign in to leave a comment.